Privacy Policy

This policy explains what the Shapie app (“Shapie”, “we”, “us”) does with your data. Shapie is made by Heaven Factories. Write to [email protected] with any question about it.

The short version

• Your money data lives on your phone, in an encrypted database.
• Shapie has no bank connection and no login. We do not ask for your name, email or phone number.
• Cloud sync is off by default. When it is on, records are encrypted on your phone before upload, so our servers hold ciphertext we cannot read.
• We collect anonymous usage and crash data to fix bugs. It never contains your transactions, amounts or category names.
• We do not sell your data, run ad networks on it, or use it to train models.

What stays on your device

Transactions, budgets, goals, categories, currency and settings are stored in an encrypted database on the phone. The encryption key is held in the device keystore (Keychain on iOS, Keystore on Android) and never leaves it. Uninstalling the app removes this database.

Cloud sync

Sync is optional and off until you turn it on. It exists so you can move to a new phone without losing your history. When you enable it, Shapie creates a vault key on your device and shows you a recovery phrase. Every record is encrypted with that key before it is sent, and the key is never uploaded in a form we can open. In practice that means we store encrypted blobs and a random identifier, and nothing else: no name, no email, no contact list, no readable amounts.

Losing the recovery phrase means losing access to the encrypted copy. We cannot restore it for you, because we cannot decrypt it. You can delete the cloud copy from Settings at any time; see deleting your data.

Usage and crash data

To find out which screens confuse people and which builds crash, the app sends product analytics and error reports. These events carry a randomly generated device identifier, the screen name, the app version, the device model and OS version, and — when something breaks — the stack trace. They do not carry your financial data, and the random identifier is not linked to any account, because there is no account to link it to.

Purchases

Shapie PRO is billed by Apple or Google, who are the sellers of record. They tell us that a receipt is valid; they do not give us your card number, address or billing details. We store the receipt and a random app user ID so your subscription survives a reinstall. See the subscription terms.

Who processes data for us

• PostHog — Product analytics and crash reports. Screen names, onboarding events, app version, device model and OS, and error stack traces, tied to a random device identifier. (EU servers (eu.i.posthog.com).)
• RevenueCat — Subscription receipts. A random app user ID and the purchase receipt Apple or Google issues, so your PRO access works across reinstalls. (United States, under the EU Standard Contractual Clauses.)
• Apple / Google — Payments and app delivery. Your purchase, billing and refund data. They are the seller of record; we never see your card details. (Per Apple’s and Google’s own privacy policies.)

Each of them is bound by a data processing agreement and may only use the data to provide the service to us.

What we never do

• We do not connect to your bank or ask for banking credentials.
• We do not sell or share your data with advertisers or data brokers.
• We do not use your financial data to train models.
• We do not track you across other apps or websites, so we do not ask for the iOS tracking permission.

Why we are allowed to do this (GDPR)

• Performing our contract with you — running the app, syncing what you asked us to sync, unlocking a subscription you bought.
• Our legitimate interest — keeping the app stable and secure, and understanding in aggregate how it is used.
• Legal obligation — keeping the records tax and accounting law requires.

How long we keep it

• Encrypted sync records: until you delete the cloud copy, or after 24 months with no sync activity, whichever comes first.
• Analytics and crash events: up to 12 months, then deleted.
• Subscription receipts: as long as the subscription is active, plus the retention period tax law imposes on us.
• Support mail: while your question is open, then up to 12 months in case you write again.

International transfers

Analytics are processed on EU servers. Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses.

Your rights

Under the GDPR you may ask for access, correction, erasure, restriction, portability, and you may object to processing based on legitimate interest. The fastest route is the app itself: Settings → Export CSVgives you a portable copy of everything, and Settings → Reset all data erases it.

A caveat worth stating plainly: because Shapie holds no name or email, a mail from you cannot be matched to any stored record. That protects you, but it also means we can only act on requests you make from inside the app. Write to [email protected] and we will walk you through it.

If you are in the EEA or the UK, you may also complain to your national data protection authority.

If you are in the United States

We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. California residents may still exercise the access and deletion rights described above, and we will not discriminate against you for using them.

Children

Shapie is not directed at children under 13 (or under 16 where local law sets that age) and we do not knowingly collect their data. If you believe a child has used the app and something needs removing, write to us and we will handle it.

Security

Data is encrypted at rest on the device and in transit over TLS. Sync records are additionally end-to-end encrypted with a key we never hold. No system is perfect; if a breach ever affects you, we will report it to the relevant authority within 72 hours and tell you directly where the law requires it.

Deleting your data

Step-by-step instructions live on the account and data deletion page.

Changes

We will post any change to this policy on this page and update the date above. Material changes will also be announced in the app before they take effect.

Contact

Heaven Factories — [email protected]. We read every mail and answer within two business days.